Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa
File: a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa (raw, json)
Hash identifier: RIWsIKu5xPVIsBwUZsKjp/FF1Uym8V7so51fZC2uPmE=
Subject key identifier: 69:9B:3A:E9:94:F8:8C:48:76:2D:26:28:41:EA:9A:38:41:B8:57:0B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583D793687BDE182B64E24AA9200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 395466
IP address blocks: 2001:470:c3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:79:36:87:bd:e1:82:b6:4e:24:aa:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=8451f684-3612-4a46-946c-218e93b3b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:5a:f3:2b:3a:56:d1:d3:23:2b:af:64:10:
29:6b:e9:09:5e:16:46:1f:f3:f6:d0:0c:88:02:6a:
be:5d:18:36:61:3c:d5:3c:b7:a4:7a:be:e4:99:a8:
ef:5d:34:50:4e:32:ed:d6:63:c9:6c:9a:12:3d:fb:
dd:3e:93:4d:b7:0b:bd:fd:ec:5f:e0:a2:da:25:e7:
6f:a1:5b:4b:9e:7b:e0:cf:04:bc:d0:1b:4a:a7:2f:
cc:0a:15:6a:3d:52:e2:bb:a3:22:d6:e9:05:52:df:
1c:be:f2:38:8c:86:d3:b0:f9:38:2f:8e:bf:4c:79:
81:35:77:01:16:16:ce:4b:9c:de:23:29:8f:9c:f5:
e8:43:fe:38:6a:18:58:84:8a:99:ce:4a:fb:18:5b:
20:16:f3:e7:2a:67:af:ea:0d:8e:85:b8:2a:4f:48:
1a:cf:ce:e1:8f:cf:b7:60:4e:bf:1a:83:95:ce:8d:
8a:8b:1b:4c:3d:6c:5e:71:ba:87:6b:cf:8a:44:85:
ef:7a:29:3c:b7:5d:53:97:fd:69:16:2d:3b:59:84:
6a:e1:88:3d:48:e7:d2:c2:10:f9:f1:2d:da:e5:4e:
e4:24:20:f6:8b:cf:d6:4f:74:11:db:61:be:ee:80:
f2:6f:f0:93:db:39:c8:ad:ca:cf:07:ec:de:8a:20:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:3A:E9:94:F8:8C:48:76:2D:26:28:41:EA:9A:38:41:B8:57:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:c3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:02:fa:9b:31:62:2a:57:99:75:64:4c:59:58:0d:15:b1:d9:
a5:1f:e1:a9:c4:02:90:82:cf:a2:37:24:48:40:6a:bd:7d:7e:
43:7c:bc:90:d2:33:c4:b7:5b:19:9c:23:ed:45:bf:99:15:de:
2b:d6:0d:3a:fd:63:e6:6a:3e:b7:0f:01:03:e6:87:b2:be:eb:
7d:54:39:41:13:54:92:6b:2e:f5:17:97:35:14:69:46:e1:01:
5a:41:83:dd:c4:0d:ce:b9:df:bc:69:b7:e8:1c:49:63:0f:1a:
ae:67:62:31:6f:f8:31:3b:4d:ac:0c:0c:d9:88:c1:00:e9:d0:
64:0b:4d:0f:08:4f:69:03:74:25:f6:7f:74:7f:4f:9b:8d:2e:
ae:72:44:3e:ec:f0:ef:c7:33:9b:cf:53:77:8c:98:73:90:ea:
24:78:a5:0d:a4:15:36:9c:51:a1:37:d6:a6:ec:e7:c9:b8:1d:
9c:5e:3b:fa:83:07:dc:44:45:03:e5:4b:e7:00:b0:f7:ab:20:
40:ea:66:a0:3a:07:6f:06:17:48:2f:c8:86:49:29:59:f0:2d:
56:d2:e2:f3:48:b8:fd:c8:e2:0e:1f:da:10:f0:01:dd:dc:7b:
f7:36:4f:3a:ba:db:1a:aa:62:70:47:ce:c9:8a:84:52:90:20:
45:5e:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:43:16 2025 by rpki-client